Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
File:                     wGWeHdFAebUh2SsfUsvE_TI-GNM.mft (raw, json)
Hash identifier:          xb94GNEKPIdfAQunoAR+8scqyevPTptl3oo3PfdW8VA=
Subject key identifier:   34:2E:49:84:DA:DB:8B:A6:D2:1C:23:1A:4E:69:77:93:60:F0:34:80
Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
Certificate issuer:       /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Certificate serial:       019ED3BD55960F38475F9CF911311487B8FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
Manifest number:          0676
Signing time:             Wed 17 Jun 2026 04:01:00 +0000
Manifest this update:     Wed 17 Jun 2026 04:01:00 +0000
Manifest next update:     Thu 18 Jun 2026 04:01:00 +0000
Files and hashes:         1: CBU14gZu_1qsi75R7hrvSmuj54o.roa (hash: 9hAgFc1Ht8EZP3iYR8ynDcxgH4YhjqI6F0AQHVc/49w=)
                          2: wGWeHdFAebUh2SsfUsvE_TI-GNM.crl (hash: BMwqcQFF08Eg+k0h7lS4IQ8+Eca9VqKhBvjjRPXpMVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:bd:55:96:0f:38:47:5f:9c:f9:11:31:14:87:b8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
        Validity
            Not Before: Jun 17 04:01:00 2026 GMT
            Not After : Jun 18 04:01:00 2026 GMT
        Subject: CN=342e4984dadb8ba6d21c231a4e69779360f03480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:61:76:4d:3f:b2:73:ce:8a:41:41:e2:e2:
                    62:54:46:59:a5:a6:a9:13:9f:1c:3d:c2:7c:37:6f:
                    29:f0:15:6c:51:f7:50:9e:37:ee:08:5e:6a:36:2f:
                    d3:4f:11:b2:bd:a6:ba:69:6f:4c:c8:67:48:4a:41:
                    0c:96:78:05:b0:83:c1:26:a6:89:ed:e2:0f:e9:32:
                    6d:75:52:f9:28:ab:8c:ff:40:b2:24:83:c8:20:07:
                    93:18:9a:52:e5:07:55:1e:d8:ec:8a:f7:15:90:9f:
                    35:77:d8:e4:ca:4d:d3:b8:4c:f1:cf:20:74:0c:4f:
                    e8:21:69:c9:d0:83:b7:23:0c:90:22:4c:7b:24:8a:
                    2b:c5:0f:3d:68:f1:36:fd:53:58:c3:32:41:ab:d4:
                    3f:42:4a:2a:24:69:1b:e8:65:bf:04:79:f3:fa:1f:
                    33:dc:be:1e:a0:d5:0d:30:40:45:c3:03:e2:86:ac:
                    a2:f5:44:3b:7c:6e:b9:e0:95:49:f4:a2:26:fc:ef:
                    e5:bd:f2:5b:c7:0e:07:34:0b:98:6a:26:6c:38:62:
                    46:0a:5f:52:7c:70:7c:0f:08:34:8c:87:64:6f:e5:
                    1b:48:1f:1a:54:15:7f:a5:8b:7d:d7:88:69:aa:b4:
                    2f:3a:f0:ba:60:de:48:d9:bc:00:8a:04:ab:32:b9:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2E:49:84:DA:DB:8B:A6:D2:1C:23:1A:4E:69:77:93:60:F0:34:80
            X509v3 Authority Key Identifier:
                keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e1:01:5d:96:23:cf:50:2d:f3:3b:ff:96:72:1f:df:6b:86:
         e6:76:6e:6e:e8:6c:e8:bf:b6:93:e7:24:00:3d:83:c9:0d:ab:
         e2:be:aa:50:a3:dc:ca:f4:d8:97:1f:6b:49:ae:bc:ee:88:61:
         4b:97:8b:c8:1f:0b:f4:a7:d8:37:3b:2a:55:4e:31:4a:5f:09:
         c8:da:d8:19:85:64:b1:ec:07:8a:f1:26:4b:a2:b9:7c:d6:8a:
         d5:13:88:a9:85:fe:04:69:0d:85:95:4c:6b:ad:12:b0:2e:c7:
         07:f3:8b:1c:53:26:b3:d7:55:40:c5:d7:92:de:f4:e2:c0:c6:
         2b:33:b9:10:63:89:34:7a:36:75:fd:a6:10:c6:93:28:50:bc:
         8f:0d:2b:3e:ca:06:0a:11:e8:75:d0:fe:51:cd:79:b8:13:ff:
         2c:3e:96:3d:1e:bf:a5:ca:db:a8:5a:29:cb:ff:be:d6:03:97:
         7a:22:11:c4:5c:b4:05:ba:77:19:1f:f2:fd:b5:ba:8f:c5:59:
         98:0b:5e:e6:1b:ff:c6:72:05:04:a4:ba:05:ee:e5:4b:f6:0a:
         64:f0:23:5d:69:e4:2f:04:73:8d:da:d1:98:4c:bd:87:97:68:
         ac:8b:94:ca:76:2f:4f:29:35:19:99:ca:4b:f1:08:90:b8:a7:
         db:85:7f:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TvVWWDzhHX5z5ETEUh7j+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNjU5ZTFkZDE0MDc5YjUyMWQ5MmIxZjUyY2JjNGZkMzIz
ZTE4ZDMwHhcNMjYwNjE3MDQwMTAwWhcNMjYwNjE4MDQwMTAwWjAzMTEwLwYDVQQD
EygzNDJlNDk4NGRhZGI4YmE2ZDIxYzIzMWE0ZTY5Nzc5MzYwZjAzNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oRhdk0/snPOikFB4uJiVEZZpaap
E58cPcJ8N28p8BVsUfdQnjfuCF5qNi/TTxGyvaa6aW9MyGdISkEMlngFsIPBJqaJ
7eIP6TJtdVL5KKuM/0CyJIPIIAeTGJpS5QdVHtjsivcVkJ81d9jkyk3TuEzxzyB0
DE/oIWnJ0IO3IwyQIkx7JIorxQ89aPE2/VNYwzJBq9Q/QkoqJGkb6GW/BHnz+h8z
3L4eoNUNMEBFwwPihqyi9UQ7fG654JVJ9KIm/O/lvfJbxw4HNAuYaiZsOGJGCl9S
fHB8Dwg0jIdkb+UbSB8aVBV/pYt914hpqrQvOvC6YN5I2bwAigSrMrmwxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQuSYTa24um0hwjGk5pd5Ng8DSAMB8GA1UdIwQY
MBaAFMBlnh3RQHm1IdkrH1LLxP0yPhjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0dXZUhkRkFlYlVoMlNzZlVzdkVfVEktR05NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84YjIwNDAtOGQzZi00MTRiLThkZTgt
MTQ2NGI0ZjkxNjcyLzEvd0dXZUhkRkFlYlVoMlNzZlVzdkVfVEktR05NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84YjIwNDAtOGQzZi00MTRiLThkZTgtMTQ2NGI0ZjkxNjcy
LzEvd0dXZUhkRkFlYlVoMlNzZlVzdkVfVEktR05NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+EBXZYj
z1At8zv/lnIf32uG5nZubuhs6L+2k+ckAD2DyQ2r4r6qUKPcyvTYlx9rSa687ohh
S5eLyB8L9KfYNzsqVU4xSl8JyNrYGYVksewHivEmS6K5fNaK1ROIqYX+BGkNhZVM
a60SsC7HB/OLHFMms9dVQMXXkt704sDGKzO5EGOJNHo2df2mEMaTKFC8jw0rPsoG
ChHoddD+Uc15uBP/LD6WPR6/pcrbqFopy/++1gOXeiIRxFy0Bbp3GR/y/bW6j8VZ
mAte5hv/xnIFBKS6Be7lS/YKZPAjXWnkLwRzjdrRmEy9h5dorIuUynYvTyk1GZnK
S/EIkLin24V/ZQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:36 2026 by rpki-client